I’m trying to set up the reply by email feature, but am getting these errors in the logs: Job exception: SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed /usr/local/lib/ruby/2.0.0/net/pop.rb:552:in `connect' /usr/local/lib/ruby/2.0.0/net/pop.rb:552:in…

WHOOO HOOOOO! It’s working!! (Self signed) Some things to note: In the code in the post above (15) the certificate has to be named .crt (and not .cert!) The hostname when creating the self signed cert should not have ‘www’ in it. The pop3 polling host in the Discourse control panel should just ha…

Coming back to this question: Is there a reason a free SSL certificate from someone like StartSSL wouldn’t work?

Personally I would prefer to use my own self-signed cert.

Self-signed is going to be a world of hurt. Not sure if we can even help you if you willingly opt in to the extreme pain scenario.

I seem to be making some progress… the only error I’m getting now is: Job exception: SSL_connect returned=1 errno=0 state=unknown state: unknown protocol With backtrace: /usr/local/lib/ruby/2.0.0/net/pop.rb:552:in `connect' /usr/local/lib/ruby/2.0.0/net/pop.rb:552:in `do_start' /usr/local/lib/rub…

Ok I think I’ve found the solution @downey @riking @codinghorror :slight_smile: Just need to add a site setting pop3 polling ssl verify none Then update this code : from: def poll_pop3 connection = Net::POP3.new(SiteSetting.pop3_polling_host, SiteSetting.pop3_polling_port) conne…

[image] I really dislike the concept of disabling ssl verification, its mega risky and defeats the purpose of having SSL. Not sure this is a good idea. As I’ve been saying.

We already have the option for SMTP: DISCOURSE_SMTP_OPENSSL_VERIFY_MODE: 'none' We also have the option to turn off SSL with POP: Use SSL while connecting to the POP3 server. (Recommended) So this has to be better than that right? Why not just let admins decide? Discourse wins as it brings the …

Stop scaring me :scream_cat: Is the only risk the server getting hacked and the key stolen? Wouldn’t you just generate another certificate? Or am I missing something? (Admittedly I do not know much about it, apart from that I have used self-signed certs for years without any problems). (Also I th…

As long as you don’t implement some kind of verification (only allowing specific certificates), disabling verification makes the certificate almost worthless. You know that your traffic is encrypted, but not with whom you’re communicating. With the settings you recommend, any active network attacke…

Reply by email SSL self signed certificate error

Support

codinghorror (Jeff Atwood) August 11, 2015, 11:19pm 21

Not sure this is a good idea. As I’ve been saying.

Topic		Replies	Views
Use a self-signed cert with Discourse for emails Sysadmins email , how-to	0	3223	August 12, 2015
Email Hostname Certificate Mismatch Causing sidekiq Queue Overload, Severe Site Instability Self-hosting	63	6533	September 28, 2023
Ya estoy cansado, he instalado discourse en varios VPS ninguno me funcionan Self-hosting	36	825	August 6, 2026
Email not working (SSL_connect returned=1) Self-hosting	15	2858	June 15, 2022
Postfix mailing fails Self-hosting	17	1942	February 2, 2019

Reply by email SSL self signed certificate error

Related topics